Edit tour

Windows Analysis Report
https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

Overview

General Information

Sample URL:	https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html
Analysis ID:	1521023
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5236 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,3973402493673667091,11036503166691275838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
1.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:54 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V320D831E7V8CKMYXX765KContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:54 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V320CV3XH0MHDWCAQJCD7VContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:55 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V321BEZ7G0AEEY1NTK6E5PContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:55 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V321EHQY5Z8GCYP6WF7VS8Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:55 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V321KSS1VWXZKZJH6NWGE7Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:55 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V321MVKRY0DETFAET60067Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:55 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V321MMNPD7ZNRZBSSTJKQ8Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sat, 28 Sep 2024 01:13:57 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J8V323BG1MK59VSNX4SPX34WContent-Length: 50Connection: close

Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_73.2.dr, chromecache_55.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_69.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://benerzxrtom.publicvm.com/res.php
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_69.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_64.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_69.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_61.2.dr, chromecache_68.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@16/39@18/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,3973402493673667091,11036503166691275838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,3973402493673667091,11036503166691275838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.110.153	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev	162.159.140.237	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
bestfilltype.netlify.app	3.70.101.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html	true		unknown
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false		unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_73.2.dr, chromecache_55.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://benerzxrtom.publicvm.com/res.php	chromecache_69.2.dr	false		unknown
https://promisesaplus.com/#point-48	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_61.2.dr, chromecache_68.2.dr	false		unknown
https://sizzlejs.com/	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_61.2.dr, chromecache_68.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
162.159.140.237	pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev	United States	13335	CLOUDFLARENETUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.70.101.28	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.108.153	unknown	Netherlands	54113	FASTLYUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
185.199.110.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521023
Start date and time:	2024-09-28 03:12:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@16/39@18/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.14, 142.250.110.84, 142.250.185.99, 34.104.35.123, 142.250.184.234, 216.58.206.42, 142.250.186.67, 142.250.186.42, 142.250.185.234, 216.58.212.138, 142.250.185.74, 142.250.185.170, 142.250.184.202, 142.250.185.106, 142.250.186.74, 172.217.23.106, 142.250.186.138, 142.250.181.234, 142.250.185.138, 172.217.18.106, 142.250.185.202, 142.250.186.170, 4.175.87.197, 199.232.214.172, 40.69.42.241, 192.229.221.95, 142.250.185.195
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Type your Secret Recovery Phrase", "prominent_button_name":"icon", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2dzBQLvDd:ObPHxBivDd
MD5:	2EFABED2A29C9C19F88A8AA6971735C6
SHA1:	4C3806C9F7DBF4CE8A7F735B1CB121CC17846FF2
SHA-256:	6F656CAE7BE6A9F545CCF72DCDD6B90EA7DB86BFAA33D8269A669DE9B8841066
SHA-512:	DCF83FFDB967716691111AFDFF5769AB8B09C067A13C3A7907A9F8471706B4DB0B9B20FBBCEAAB26DB235C63461AB402BD21FC7D1AD1C89DB9B38E4252587942
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J8V321MMNPD7ZNRZBSSTJKQ8

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQk0j4yAHCrqXBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCSz2qYiRNiA-EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCflVOrDVsstGEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCXey_8S_fBkTEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCUUrq6nWue3JEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.996565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2dzB/816:ObPHxB/8M
MD5:	9B7049DB9CCDAD3B83C3BF8A226749AF
SHA1:	971126A27307EAF57CB5B4B18598200EFBE5352B
SHA-256:	AF4C3CAA62451CE036DDF8392945A061329F385A1C16A950383A2261782DB4B2
SHA-512:	851DFA91FB2F67B8D2CD6C5587F12FC0A89E4BE33CCED8D29DA920ED8ADED3D690C90752C08413A2771B900A7CEE1133D9C59F314A32F3E60432C1846528F5F7
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J8V321EHQY5Z8GCYP6WF7VS8

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2dzDiUouJgz231:ObPHxDiLaF
MD5:	E68ED1F26C9B75F9B8A20EA2505252E7
SHA1:	059C56159D8E44EC021C1A954D14786DF7FB97E4
SHA-256:	6190E660431CD1EBE9DCD16D7D0D717F59973E9F1DEE34CC343F2A39C707A735
SHA-512:	B1189B24DAF5C25DF8F229905FB65430E25917B4B199EA7DA9C5448F4014689DD28E54E21BE7F4924165B70E65F8C23CFC6F60F083264559D5007EA1FF7CF4E9
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J8V323BG1MK59VSNX4SPX34W

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242717
Encrypted:	false
SSDEEP:	3:ObynQA2dzBJXVmS:ObPHxBJXVl
MD5:	1CBE618BAD555F4E083FB3BA6C7581B6
SHA1:	715807E80D3CF3BADAE711668F7DFF4CF8A0B6E0
SHA-256:	492D3FB4E8B341C77CE95FE24FFFBAA9E2B6D20F9ED43382E4515F6B63ABE455
SHA-512:	03DEF4A502E99ED85CB5B05319A92D28B1C65F1813BF592FE3E40CD2FFFCAC6A54B324EC54800612F4E3CBDEAE4E5C412EAD4B2C78043BC30EA49FE8E7900C49
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J8V321KSS1VWXZKZJH6NWGE7

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65293
Entropy (8bit):	4.720672177262125
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBB:i3kvjqy5kikTYXa1oG33XgJ
MD5:	57E5E7F5F9DC1CA02B19F4DBFB62D369
SHA1:	599D1BD9C8FA05EECFB09E59B0E1270756D5A5A0
SHA-256:	44672840904630BE681372A18799F6744F627D15F8E3F6752648E39B5710C172
SHA-512:	A110658D7D6E5412BE3AABD9D28C3CA368EEC1D10A3CEBE18CDC1211DE7B4DBA4BA937A8859F2D6243169BDB716CAF1CDFFBEF53A74D4208EE11F37C1FBCAF59
Malicious:	false
Reputation:	low
URL:	https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2dzB5iylS:ObPHxB5/M
MD5:	C8F6F6A39961B905D32FC4740AED0664
SHA1:	5D1E5FE65569B0B4ACB8A6475EE4B600B542B22F
SHA-256:	CEB9C6E0972EF51B7A831C5A92301D978848D7D949F32FA7FA9185120D0709DF
SHA-512:	5079DDDA7FFC05CE66F1C7C359CCBAC60F7D8E0D51207D479ACB871017CF72DE75AD6D2948D3348EA1F86E9EEE36F80DBBCEAD9D1075AE659042E3C5522D6B9D
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J8V321BEZ7G0AEEY1NTK6E5P

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2dzALWUwurmQu:ObPHxhui
MD5:	88726025065066BC92E7E1029827D0E6
SHA1:	CDBFC33C71F0C08DAE23BDF40B72C38CA9A32F68
SHA-256:	237B3E4B6769D7280C2F18BA43F9BA20BCC4C64005147903EAB4B7513E28BBC1
SHA-512:	DEED0895BC174C96D198BB6ADC130F428FCE1D7DB6058FF6A86C10577F4FD948C86292ADDF0F6877E8FE18A8FDC2C225BD5AFFA2ED319A6E463A0BA0C80D68B9
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J8V320D831E7V8CKMYXX765K

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 03:13:41.396735907 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 28, 2024 03:13:51.006043911 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 28, 2024 03:13:52.474612951 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.474647045 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.474823952 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.475071907 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.475156069 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.475244045 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.475321054 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.475334883 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.475584030 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.475635052 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.945264101 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.945589066 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.945632935 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.945854902 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.946034908 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.946057081 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.947448969 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.947532892 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.947809935 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.947875023 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.948738098 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.948834896 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.949048042 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.949148893 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.949220896 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.949237108 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.996675014 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:52.996680975 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:52.996679068 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.042922974 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.231057882 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231267929 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231340885 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.231348991 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231376886 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231441021 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.231498957 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231643915 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.231697083 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.231720924 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.235671043 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.235745907 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.235761881 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.235837936 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.235889912 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.235902071 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.279912949 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.317533016 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.317723036 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.317785978 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.317799091 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.317826033 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.317883015 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.317898989 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318057060 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318104982 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.318136930 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318485022 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318545103 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.318557024 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318631887 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318677902 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.318691015 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318770885 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.318820953 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.318833113 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.319477081 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.319545984 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.319559097 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.319649935 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.319701910 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.319713116 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320297003 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320348024 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.320360899 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320425034 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320475101 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.320486069 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320555925 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.320600986 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.320611954 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.363445997 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.363477945 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404334068 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404414892 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.404419899 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404448032 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404496908 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.404525042 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404755116 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.404805899 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.404822111 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405142069 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405198097 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.405211926 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405256033 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.405594110 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405611992 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405649900 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.405708075 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405756950 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.405769110 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405879021 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.405936003 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.465343952 CEST	49736	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:13:53.465375900 CEST	443	49736	162.159.140.237	192.168.2.4
Sep 28, 2024 03:13:53.470194101 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470230103 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.470284939 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470350027 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470390081 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.470428944 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470618010 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470632076 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.470760107 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.470772982 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.471582890 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.471590996 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.471628904 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.471903086 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.471915960 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.473530054 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.473577976 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:53.473630905 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.473687887 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.473714113 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:53.473763943 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.474020958 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.474041939 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:53.474186897 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:53.474198103 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:53.941916943 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.942774057 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.942790985 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.944443941 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.944504976 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.944561005 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.945002079 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.945429087 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.945440054 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.946862936 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.946923971 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.948064089 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.948082924 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.948658943 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.948750019 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.949644089 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.949707985 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.950305939 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.950393915 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.952164888 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:53.952174902 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:53.952567101 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.952658892 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.953212023 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.953218937 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:53.953294039 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:53.953308105 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.004404068 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.004404068 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.004431009 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.050802946 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051034927 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051090002 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.051104069 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051179886 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051225901 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.051237106 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051333904 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051374912 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.051389933 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051657915 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.051703930 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.051712990 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053298950 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053505898 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053550005 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.053570032 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053654909 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053698063 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.053709030 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053843021 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.053879976 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.053888083 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.054253101 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.054296970 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.054305077 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.054374933 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.054416895 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.054425001 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.055493116 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.055550098 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.055557966 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.067044973 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.067095041 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.067105055 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.067373991 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.067426920 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.067440033 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.070628881 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.070750952 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.070799112 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.070810080 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.070909023 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.070951939 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.070960045 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.071036100 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.071089983 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.071098089 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.071322918 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.071363926 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.071372032 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.075135946 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.075202942 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.075213909 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.075289965 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.075336933 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.075345039 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.109699011 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.113533974 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.113543034 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.114716053 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.114713907 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.115067959 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.115128994 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.117362022 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.117439985 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.117826939 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.117832899 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.119529009 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.119869947 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.119900942 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.120755911 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.120815039 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.121730089 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.121784925 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.121974945 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.121983051 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.129973888 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.139060974 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139256954 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139306068 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.139317036 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139441967 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139488935 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.139497042 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139578104 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.139621019 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.139628887 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140042067 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140089035 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.140104055 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140196085 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140240908 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.140249968 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140341997 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.140391111 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.140398979 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141006947 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141057968 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.141067028 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141155005 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141208887 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.141216040 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141788960 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141844034 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.141850948 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141948938 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.141993999 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.142002106 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.142096996 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.142143011 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.142151117 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143013954 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143037081 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143053055 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143078089 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.143098116 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143112898 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.143116951 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143142939 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.143146992 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.143158913 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.143183947 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.144666910 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.144714117 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.144737005 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.144748926 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.144778013 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.144797087 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.157224894 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.157402039 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.157450914 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.157464981 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.157622099 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.157665968 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.158447981 CEST	49741	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.158464909 CEST	443	49741	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.161890030 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.161956072 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.180469990 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.180525064 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.180584908 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.181056976 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.181091070 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.191876888 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.191888094 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.197235107 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.197303057 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.197312117 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227190971 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227247953 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.227257013 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227341890 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227396965 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.227405071 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227507114 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227554083 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.227561951 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227655888 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227700949 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.227710009 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227796078 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.227839947 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.227847099 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229330063 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229351044 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229393959 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.229396105 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229425907 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229429007 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.229450941 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.229453087 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.229465961 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.229515076 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.230885983 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.230933905 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.230995893 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231019020 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231031895 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231055975 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231065989 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231108904 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231127024 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231147051 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231180906 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231549978 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231590986 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231614113 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231623888 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.231647015 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.231662989 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.232402086 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.232456923 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.232465982 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.232556105 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.232606888 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.236202955 CEST	49738	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.236221075 CEST	443	49738	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.260706902 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.260759115 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.260807991 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.261363029 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.261379004 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.285363913 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.285413027 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.285444021 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.285455942 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.285514116 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.316454887 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.316504955 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.316534042 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.316549063 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.316601992 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.316920996 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.316936970 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.316975117 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.316982985 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.317007065 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.317857027 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.317878962 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.317910910 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.317922115 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.317954063 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.318747997 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.318766117 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.318800926 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.318818092 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.318844080 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.319700956 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.319724083 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.319752932 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.319762945 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.319791079 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.320660114 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.320686102 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.320713997 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.320730925 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.320760012 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.366225004 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.373814106 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.373879910 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.373915911 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.373939037 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.373958111 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.373976946 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404179096 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404238939 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404259920 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404274940 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404319048 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404319048 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404696941 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404742002 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404767990 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404776096 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.404803991 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.404818058 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.405095100 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.405173063 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.405189037 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.405196905 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.405251980 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.405298948 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.405348063 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.435117006 CEST	49739	443	192.168.2.4	151.101.194.137
Sep 28, 2024 03:13:54.435131073 CEST	443	49739	151.101.194.137	192.168.2.4
Sep 28, 2024 03:13:54.438445091 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.438503027 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.438551903 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.447635889 CEST	49742	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.447659969 CEST	443	49742	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.453855991 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.453932047 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.454088926 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.454530001 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.454566002 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.463908911 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.463946104 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.464004040 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.464474916 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.464489937 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.546459913 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.546540022 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.546597004 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.548261881 CEST	49743	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.548280001 CEST	443	49743	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.558737040 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.558764935 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.558825970 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.559504986 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.559519053 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.637456894 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.644644976 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.644687891 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.646220922 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.646282911 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.647509098 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.647644043 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.647897005 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.692028046 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.692059994 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.717916012 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.717973948 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.718020916 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.718342066 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.719010115 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.719033957 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.719363928 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.719372988 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.722141027 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.722177982 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.722234011 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.722881079 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.722893000 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.722929001 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.722999096 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.738621950 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.749337912 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:54.749409914 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:54.749469995 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:54.750407934 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.750576019 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.750664949 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.751591921 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:54.751604080 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:54.756619930 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.756635904 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.756695032 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.756962061 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:54.756974936 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:54.769145012 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769253969 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769323111 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.769345999 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769437075 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769481897 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.769496918 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769593000 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769638062 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.769649029 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769747019 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.769798040 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.769808054 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.773613930 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.773674011 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.773684978 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.801018000 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.801048040 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.815696001 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.815716982 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.843271017 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.846111059 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.855529070 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.855598927 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.855623960 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.855654955 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.855710030 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.855763912 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.856010914 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.856064081 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.861440897 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861465931 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861483097 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861499071 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.861521959 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861536026 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.861540079 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861558914 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861577988 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861583948 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.861604929 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.861609936 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.861628056 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.880413055 CEST	49746	443	192.168.2.4	104.17.25.14
Sep 28, 2024 03:13:54.880456924 CEST	443	49746	104.17.25.14	192.168.2.4
Sep 28, 2024 03:13:54.915086031 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.919677973 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.919949055 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.919980049 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.920958042 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.921029091 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.923027992 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.923086882 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.923187971 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.923196077 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.933919907 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.933968067 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.933986902 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.934005022 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.934034109 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.934048891 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.934053898 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.934079885 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.934082985 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.934114933 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.934123993 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.935337067 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.935358047 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.935403109 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.935440063 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:54.935513020 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.935530901 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:54.966634035 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.018858910 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.019781113 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.019808054 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.019830942 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.019829988 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.019866943 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.019886017 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.019949913 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020001888 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020026922 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.020055056 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020065069 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.020095110 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.020179987 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020214081 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020237923 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.020243883 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020271063 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020288944 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.020297050 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.020338058 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.021146059 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021265030 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021306992 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021330118 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.021337032 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021358967 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.021377087 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.021416903 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021475077 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.021481991 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021589041 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.021651030 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.023540974 CEST	49747	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.023556948 CEST	443	49747	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.034413099 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.034476042 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.034497023 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.084237099 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.087764978 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.088001966 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.088068008 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.089318037 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.089785099 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.089970112 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.089997053 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.108130932 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108170986 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108195066 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108230114 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108243942 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.108258963 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108269930 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.108285904 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.108304024 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.109096050 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.109446049 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.109491110 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.109504938 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.109661102 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.109705925 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.109713078 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.109972954 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.110001087 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.110012054 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.110018969 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.110048056 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.110058069 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.110064030 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.110106945 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.111042023 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.111212969 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.111247063 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.111257076 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.111263037 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.111303091 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.111309052 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.112068892 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.112096071 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.112116098 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.112133980 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.112171888 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.135410070 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.139925957 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.168160915 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.187855005 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.188328981 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.188360929 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.188987970 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.189627886 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.189723015 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.189768076 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.194824934 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.194892883 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.194912910 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.194921970 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.194957018 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.194958925 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.194964886 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.194998026 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.195300102 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.195338964 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.195362091 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.195615053 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.195636034 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.195761919 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.196825027 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.196832895 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.196871042 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.196883917 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.196903944 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.196930885 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.196970940 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.198522091 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.198538065 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.198580980 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.198592901 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.198609114 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.198633909 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.199505091 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.199520111 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.199564934 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.199573040 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.199609995 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.207639933 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.208476067 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.208492041 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.209521055 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.209584951 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.233091116 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.233120918 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.283585072 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.283607960 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.283660889 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.283688068 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.283704042 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.283730984 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.284611940 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.284627914 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.284677029 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.284682989 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.284701109 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.284725904 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.285588026 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.285608053 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.285667896 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.285676003 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.285717964 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.286470890 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.286485910 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.286546946 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.286554098 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.286634922 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.287543058 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.287559032 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.287599087 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.287605047 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.287636042 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.287657022 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.288336039 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.288352966 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.288405895 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.288413048 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.288456917 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.308759928 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.308948994 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.309355021 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.309370041 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.316399097 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:55.316490889 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:55.316577911 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:55.316940069 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:55.316977978 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:55.323736906 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.323764086 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.323827028 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.323836088 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.323858976 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.323890924 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.350742102 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.355420113 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.355976105 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.356004953 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.357445955 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.357522964 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.358284950 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.358366013 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.358603954 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.358616114 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.370215893 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370246887 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370321035 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.370336056 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370378017 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.370652914 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370670080 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370707035 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.370712996 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.370726109 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.370750904 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.371115923 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.371164083 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.371189117 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.371191978 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.371222019 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.371243000 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.378082037 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.378492117 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.378509998 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.379547119 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.379626989 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.380259991 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.380312920 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.383254051 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.383748055 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.383755922 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.385565042 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.385601997 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.386519909 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.386601925 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.387121916 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.387196064 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.387460947 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.387475014 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.398427963 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.399585962 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.399754047 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.399967909 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.402853012 CEST	49750	443	192.168.2.4	151.101.130.137
Sep 28, 2024 03:13:55.402898073 CEST	443	49750	151.101.130.137	192.168.2.4
Sep 28, 2024 03:13:55.407108068 CEST	49749	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.407136917 CEST	443	49749	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.415589094 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.415756941 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.415827990 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.426273108 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.439698935 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.445350885 CEST	49754	443	192.168.2.4	185.199.110.153
Sep 28, 2024 03:13:55.445382118 CEST	443	49754	185.199.110.153	192.168.2.4
Sep 28, 2024 03:13:55.500708103 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.500799894 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.501000881 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.629528999 CEST	49751	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.629570961 CEST	443	49751	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.670409918 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.670505047 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.672703981 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.701761961 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.701847076 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.702111959 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.702189922 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.702248096 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:55.705032110 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:55.963486910 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:56.006779909 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:56.006841898 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:56.008470058 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:56.008546114 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:56.009730101 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:56.009833097 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:56.011895895 CEST	49752	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.011930943 CEST	443	49752	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:56.012821913 CEST	49753	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.012845039 CEST	443	49753	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:56.013479948 CEST	49755	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.013487101 CEST	443	49755	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:56.058042049 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:56.058083057 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:13:56.098262072 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:13:56.515893936 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.515934944 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:56.516011953 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.516459942 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:56.516472101 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:56.917776108 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:56.917823076 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:56.917886019 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:56.920020103 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:56.920032978 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:57.142240047 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.142853022 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:57.142880917 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.143313885 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.144154072 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:57.144228935 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.144320965 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:57.191401005 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.451713085 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.451786995 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.451833010 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:57.453860998 CEST	49761	443	192.168.2.4	3.70.101.28
Sep 28, 2024 03:13:57.453883886 CEST	443	49761	3.70.101.28	192.168.2.4
Sep 28, 2024 03:13:57.508238077 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:57.508280039 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:57.508507013 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:57.508980036 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:57.508994102 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:57.572611094 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:57.572691917 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:57.593149900 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:57.593166113 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:57.594170094 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:57.723638058 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:57.856837988 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:57.903428078 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:57.990412951 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:57.997947931 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:57.997968912 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:57.998971939 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:57.999058008 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.011677980 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.011744022 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:58.012154102 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.012166023 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:58.043948889 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:58.044146061 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:58.044446945 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.113624096 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:58.113683939 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.113686085 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:58.113744974 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.541363001 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.541414976 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:58.541428089 CEST	49762	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.541435957 CEST	443	49762	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:58.608072042 CEST	49768	443	192.168.2.4	185.199.108.153
Sep 28, 2024 03:13:58.608117104 CEST	443	49768	185.199.108.153	192.168.2.4
Sep 28, 2024 03:13:58.664012909 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.664062977 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:58.664196014 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.664514065 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:58.664530039 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.317958117 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.318092108 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.332257986 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.332277060 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.332602024 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.333883047 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.379410028 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.597336054 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.597390890 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.597517014 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.694029093 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.694057941 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:13:59.694072962 CEST	49769	443	192.168.2.4	184.28.90.27
Sep 28, 2024 03:13:59.694080114 CEST	443	49769	184.28.90.27	192.168.2.4
Sep 28, 2024 03:14:06.426120996 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:06.426276922 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:06.426342010 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:06.609432936 CEST	49758	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:06.609497070 CEST	443	49758	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:07.841280937 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:14:07.841347933 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:14:07.841464043 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:14:08.014621019 CEST	49735	443	192.168.2.4	162.159.140.237
Sep 28, 2024 03:14:08.014648914 CEST	443	49735	162.159.140.237	192.168.2.4
Sep 28, 2024 03:14:08.938482046 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 03:14:08.943821907 CEST	80	49723	199.232.210.172	192.168.2.4
Sep 28, 2024 03:14:08.944094896 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 03:14:55.366046906 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:55.366118908 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:55.366188049 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:55.366504908 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:55.366539955 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:55.995013952 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:55.995539904 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:55.995570898 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:55.996026993 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:55.996634007 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:55.996714115 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:14:56.052789927 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:14:57.099617004 CEST	49724	80	192.168.2.4	199.232.210.172
Sep 28, 2024 03:14:57.104872942 CEST	80	49724	199.232.210.172	192.168.2.4
Sep 28, 2024 03:14:57.104931116 CEST	49724	80	192.168.2.4	199.232.210.172
Sep 28, 2024 03:15:05.911210060 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:15:05.911293983 CEST	443	49778	142.250.185.132	192.168.2.4
Sep 28, 2024 03:15:05.911340952 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:15:07.684953928 CEST	49778	443	192.168.2.4	142.250.185.132
Sep 28, 2024 03:15:07.684983969 CEST	443	49778	142.250.185.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 03:13:51.307105064 CEST	53	56409	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:51.307797909 CEST	53	54146	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:52.352799892 CEST	53	62348	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:52.449176073 CEST	63682	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:52.449659109 CEST	50312	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:52.459732056 CEST	53	50312	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:52.473992109 CEST	53	63682	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.254872084 CEST	53	62447	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.463282108 CEST	54801	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.463433981 CEST	54963	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.463972092 CEST	51989	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.464080095 CEST	60020	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.464956999 CEST	50939	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.465085030 CEST	51868	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:53.469757080 CEST	53	54801	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.469863892 CEST	53	54963	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.470396042 CEST	53	51989	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.471040010 CEST	53	61461	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.471153021 CEST	53	60020	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.473027945 CEST	53	50939	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:53.473282099 CEST	53	51868	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.172673941 CEST	51947	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.173171043 CEST	60748	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.179217100 CEST	53	51947	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.179775953 CEST	53	60748	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.252918005 CEST	60029	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.253377914 CEST	55581	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.259681940 CEST	53	60029	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.259886026 CEST	53	55581	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.714241982 CEST	56855	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.714942932 CEST	51589	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:54.722281933 CEST	53	56855	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:54.723176003 CEST	53	51589	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:55.307744980 CEST	62453	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:55.308223963 CEST	56403	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:55.314471006 CEST	53	62453	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:55.314815044 CEST	53	56403	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:55.338365078 CEST	53	55919	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:55.633111000 CEST	53	60285	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:57.471793890 CEST	54919	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:57.472214937 CEST	54590	53	192.168.2.4	1.1.1.1
Sep 28, 2024 03:13:57.480762959 CEST	53	54590	1.1.1.1	192.168.2.4
Sep 28, 2024 03:13:57.480779886 CEST	53	54919	1.1.1.1	192.168.2.4
Sep 28, 2024 03:14:08.669948101 CEST	138	138	192.168.2.4	192.168.2.255
Sep 28, 2024 03:14:09.507338047 CEST	53	56182	1.1.1.1	192.168.2.4
Sep 28, 2024 03:14:28.540898085 CEST	53	55264	1.1.1.1	192.168.2.4
Sep 28, 2024 03:14:51.229732990 CEST	53	60839	1.1.1.1	192.168.2.4
Sep 28, 2024 03:14:51.429775000 CEST	53	50884	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 03:13:52.449176073 CEST	192.168.2.4	1.1.1.1	0x65da	Standard query (0)	pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:52.449659109 CEST	192.168.2.4	1.1.1.1	0x719e	Standard query (0)	pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev	65	IN (0x0001)	false
Sep 28, 2024 03:13:53.463282108 CEST	192.168.2.4	1.1.1.1	0x6c5f	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.463433981 CEST	192.168.2.4	1.1.1.1	0x333b	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 28, 2024 03:13:53.463972092 CEST	192.168.2.4	1.1.1.1	0xed4d	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.464080095 CEST	192.168.2.4	1.1.1.1	0xd4bd	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 28, 2024 03:13:53.464956999 CEST	192.168.2.4	1.1.1.1	0x1617	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.465085030 CEST	192.168.2.4	1.1.1.1	0xbfc0	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Sep 28, 2024 03:13:54.172673941 CEST	192.168.2.4	1.1.1.1	0xb6b4	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.173171043 CEST	192.168.2.4	1.1.1.1	0xb9fe	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Sep 28, 2024 03:13:54.252918005 CEST	192.168.2.4	1.1.1.1	0xf046	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.253377914 CEST	192.168.2.4	1.1.1.1	0xe6ea	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Sep 28, 2024 03:13:54.714241982 CEST	192.168.2.4	1.1.1.1	0xfe57	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.714942932 CEST	192.168.2.4	1.1.1.1	0x2add	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Sep 28, 2024 03:13:55.307744980 CEST	192.168.2.4	1.1.1.1	0x5a19	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:55.308223963 CEST	192.168.2.4	1.1.1.1	0x90d1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 03:13:57.471793890 CEST	192.168.2.4	1.1.1.1	0x5ce	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:57.472214937 CEST	192.168.2.4	1.1.1.1	0x7340	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 28, 2024 03:13:52.473992109 CEST	1.1.1.1	192.168.2.4	0x65da	No error (0)	pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:52.473992109 CEST	1.1.1.1	192.168.2.4	0x65da	No error (0)	pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.469757080 CEST	1.1.1.1	192.168.2.4	0x6c5f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.469757080 CEST	1.1.1.1	192.168.2.4	0x6c5f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.469757080 CEST	1.1.1.1	192.168.2.4	0x6c5f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.469757080 CEST	1.1.1.1	192.168.2.4	0x6c5f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.470396042 CEST	1.1.1.1	192.168.2.4	0xed4d	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.470396042 CEST	1.1.1.1	192.168.2.4	0xed4d	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.471153021 CEST	1.1.1.1	192.168.2.4	0xd4bd	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 28, 2024 03:13:53.473027945 CEST	1.1.1.1	192.168.2.4	0x1617	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:53.473027945 CEST	1.1.1.1	192.168.2.4	0x1617	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.179217100 CEST	1.1.1.1	192.168.2.4	0xb6b4	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.179217100 CEST	1.1.1.1	192.168.2.4	0xb6b4	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.179775953 CEST	1.1.1.1	192.168.2.4	0xb9fe	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Sep 28, 2024 03:13:54.259681940 CEST	1.1.1.1	192.168.2.4	0xf046	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.259681940 CEST	1.1.1.1	192.168.2.4	0xf046	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.259681940 CEST	1.1.1.1	192.168.2.4	0xf046	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.259681940 CEST	1.1.1.1	192.168.2.4	0xf046	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.722281933 CEST	1.1.1.1	192.168.2.4	0xfe57	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.722281933 CEST	1.1.1.1	192.168.2.4	0xfe57	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.722281933 CEST	1.1.1.1	192.168.2.4	0xfe57	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:54.722281933 CEST	1.1.1.1	192.168.2.4	0xfe57	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:55.314471006 CEST	1.1.1.1	192.168.2.4	0x5a19	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:55.314815044 CEST	1.1.1.1	192.168.2.4	0x90d1	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 28, 2024 03:13:57.480779886 CEST	1.1.1.1	192.168.2.4	0x5ce	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:57.480779886 CEST	1.1.1.1	192.168.2.4	0x5ce	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:57.480779886 CEST	1.1.1.1	192.168.2.4	0x5ce	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:13:57.480779886 CEST	1.1.1.1	192.168.2.4	0x5ce	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:14:04.854475975 CEST	1.1.1.1	192.168.2.4	0x654b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:14:04.854475975 CEST	1.1.1.1	192.168.2.4	0x654b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:14:07.821382046 CEST	1.1.1.1	192.168.2.4	0x40d4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:14:07.821382046 CEST	1.1.1.1	192.168.2.4	0x40d4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:14:24.622060061 CEST	1.1.1.1	192.168.2.4	0xc7d0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:14:24.622060061 CEST	1.1.1.1	192.168.2.4	0xc7d0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:14:43.526777983 CEST	1.1.1.1	192.168.2.4	0x935d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:14:43.526777983 CEST	1.1.1.1	192.168.2.4	0x935d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:15:04.309911966 CEST	1.1.1.1	192.168.2.4	0x1f9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:15:04.309911966 CEST	1.1.1.1	192.168.2.4	0x1f9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	162.159.140.237	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:52 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:53 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 01:13:53 GMT Content-Type: text/html Content-Length: 65293 Connection: close Accept-Ranges: bytes ETag: "57e5e7f5f9dc1ca02b19f4dbfb62d369" Last-Modified: Mon, 10 Jun 2024 17:52:28 GMT Server: cloudflare CF-RAY: 8c9fdf9a68ed43ac-EWR
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-09-28 01:13:53 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	104.17.25.14	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:53 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	934	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 01:13:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 786263 Expires: Thu, 18 Sep 2025 01:13:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pfR2KggA%2BnElbVfU0RWJtLXlKPWZrc%2BG%2B%2FAHEVkA0ZpU41IrpRWJr5Mb50FgOSJAO64PXF6YBUSY57mkxnIcdhB9Iz04ngTwTmmitpKP5L38lVshh3%2FIwgKsp%2BvPjqPq6sYFznEr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c9fdfa098cbc425-EWR
2024-09-28 01:13:54 UTC	435	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 Data Ascii: =getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c Data Ascii: &void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFl
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 Data Ascii: t-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f Data Ascii: h:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 Data Ascii: ` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowSt
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f Data Ascii: &&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNo
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 Data Ascii: function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'star
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e Data Ascii: ==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 Data Ascii: &e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49739	151.101.194.137	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:53 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3262243 Date: Sat, 28 Sep 2024 01:13:54 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740078-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1727486034.003306,VS0,VE1 Vary: Accept-Encoding
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49738	151.101.194.137	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:53 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:13:54 GMT Age: 1605417 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740050-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 6 X-Timer: S1727486034.007317,VS0,VE0 Vary: Accept-Encoding
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-09-28 01:13:54 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:54 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:54 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V320CV3XH0MHDWCAQJCD7V Content-Length: 50 Connection: close
2024-09-28 01:13:54 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 30 43 56 33 58 48 30 4d 48 44 57 43 41 51 4a 43 44 37 56 Data Ascii: Not Found - Request ID: 01J8V320CV3XH0MHDWCAQJCD7V

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49742	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:54 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:54 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V320D831E7V8CKMYXX765K Content-Length: 50 Connection: close
2024-09-28 01:13:54 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 30 44 38 33 31 45 37 56 38 43 4b 4d 59 58 58 37 36 35 4b Data Ascii: Not Found - Request ID: 01J8V320D831E7V8CKMYXX765K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	104.17.25.14	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:54 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	926	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 01:13:54 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 786263 Expires: Thu, 18 Sep 2025 01:13:54 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j3G%2BwSbWbjPePoTOtDHXfdIy98z%2BwtKuA7pOxTPJp43MpjoBjxCkH3iQRoL7EFEYww8vO35tOSGaxRvGu9UmXt3A6WUPuI8wjsExnCK0caIR1PGw9Cq3J3dTssjeaVQenqcGktKP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8c9fdfa4ffbc19df-EWR
2024-09-28 01:13:54 UTC	443	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 3d 69 2e 6f 76 Data Ascii: utedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.ov
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat(e['b
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 59 27 21 3d 3d Data Ascii: -m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BODY'!==
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c 69 65 6e 74 57 Data Ascii: h,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.clientW
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 73 3a 7b 7d 2c Data Ascii: recated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyles:{},
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 2c 74 2c 6f 2c Data Ascii: opper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode),t,o,
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d 3d 3d 65 3f 27 Data Ascii: (e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'===e?'
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e 70 6c 61 63 65 Data Ascii: -'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.place
2024-09-28 01:13:54 UTC	1369	IN	Data Raw: 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 Data Ascii: t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPropert

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49747	151.101.130.137	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:54 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:54 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:13:54 GMT Age: 1605417 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 1 X-Timer: S1727486035.800717,VS0,VE1 Vary: Accept-Encoding
2024-09-28 01:13:54 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-09-28 01:13:54 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-09-28 01:13:54 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-09-28 01:13:55 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-09-28 01:13:55 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-09-28 01:13:55 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	151.101.130.137	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:54 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:13:54 GMT Age: 3262244 X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740044-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 3 X-Timer: S1727486035.974010,VS0,VE1 Vary: Accept-Encoding
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-09-28 01:13:55 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49749	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V321BEZ7G0AEEY1NTK6E5P Content-Length: 50 Connection: close
2024-09-28 01:13:55 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 31 42 45 5a 37 47 30 41 45 45 59 31 4e 54 4b 36 45 35 50 Data Ascii: Not Found - Request ID: 01J8V321BEZ7G0AEEY1NTK6E5P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49751	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V321EHQY5Z8GCYP6WF7VS8 Content-Length: 50 Connection: close
2024-09-28 01:13:55 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 31 45 48 51 59 35 5a 38 47 43 59 50 36 57 46 37 56 53 38 Data Ascii: Not Found - Request ID: 01J8V321EHQY5Z8GCYP6WF7VS8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	185.199.110.153	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	722	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 01:23:55 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2E9C:1D391E:15C0A09:180509F:66F7584D Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 01:13:55 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890085-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727486035.359593,VS0,VE11 Vary: Accept-Encoding X-Fastly-Request-ID: 468c929a923c57b684baf5100ef6a45d12074eba
2024-09-28 01:13:55 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49752	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V321KSS1VWXZKZJH6NWGE7 Content-Length: 50 Connection: close
2024-09-28 01:13:55 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 31 4b 53 53 31 56 57 58 5a 4b 5a 4a 48 36 4e 57 47 45 37 Data Ascii: Not Found - Request ID: 01J8V321KSS1VWXZKZJH6NWGE7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49753	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V321MMNPD7ZNRZBSSTJKQ8 Content-Length: 50 Connection: close
2024-09-28 01:13:55 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 31 4d 4d 4e 50 44 37 5a 4e 52 5a 42 53 53 54 4a 4b 51 38 Data Ascii: Not Found - Request ID: 01J8V321MMNPD7ZNRZBSSTJKQ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49755	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:55 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:55 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:55 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V321MVKRY0DETFAET60067 Content-Length: 50 Connection: close
2024-09-28 01:13:55 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 31 4d 56 4b 52 59 30 44 45 54 46 41 45 54 36 30 30 36 37 Data Ascii: Not Found - Request ID: 01J8V321MVKRY0DETFAET60067

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49761	3.70.101.28	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:57 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:57 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sat, 28 Sep 2024 01:13:57 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J8V323BG1MK59VSNX4SPX34W Content-Length: 50 Connection: close
2024-09-28 01:13:57 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 38 56 33 32 33 42 47 31 4d 4b 35 39 56 53 4e 58 34 53 50 58 33 34 57 Data Ascii: Not Found - Request ID: 01J8V323BG1MK59VSNX4SPX34W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:57 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 01:13:58 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=228665 Date: Sat, 28 Sep 2024 01:13:57 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49768	185.199.108.153	443	5236	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:58 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:13:58 UTC	720	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 28 Sep 2024 01:23:55 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2E9C:1D391E:15C0A09:180509F:66F7584D Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:13:58 GMT Via: 1.1 varnish Age: 3 X-Served-By: cache-nyc-kteb1890099-NYC X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727486038.063056,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 000386914bf5af78fb8470e700ed8504ed5a3813
2024-09-28 01:13:58 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49769	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:13:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 01:13:59 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=228693 Date: Sat, 28 Sep 2024 01:13:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 01:13:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2120, Parent PID: 480

General

Target ID:	0
Start time:	21:13:45
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5236, Parent PID: 2120

General

Target ID:	2
Start time:	21:13:48
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2028,i,3973402493673667091,11036503166691275838,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 480

General

Target ID:	3
Start time:	21:13:51
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
https://pub-54cc1eebe4b04c389c2d7f5d109528bd.r2.dev/index.html